This IP address has been reported a total of
43
times from
40 distinct
sources.
116.110.148.120 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Netherlands
with 10
reports;
Italy
with 9
reports;
Australia
with 7
reports.
The most common categories in these recent reports were:
Brute-Force
40
times;
SSH
39
times;
Bad Web Bot
2
times;
Web App Attack
2
times;
Web Spam
1
time;
Other
3
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Report 2743516 with IP 3791085 for SSH brute-force attack by source 3785741 via ssh-honeypot/0.2.1+h ...
show moreReport 2743516 with IP 3791085 for SSH brute-force attack by source 3785741 via ssh-honeypot/0.2.1+http
show less
Brute-Force
SSH
Anonymous
Oct 12 20:43:23 C1D543E sshd[2505053]: Invalid user user from 116.110.148.120 port 45416
Oct 12 20:4 ...
show moreOct 12 20:43:23 C1D543E sshd[2505053]: Invalid user user from 116.110.148.120 port 45416
Oct 12 20:43:24 C1D543E sshd[2505053]: Failed password for invalid user user from 116.110.148.120 port 45416 ssh2
Oct 12 20:43:27 C1D543E sshd[2505055]: Invalid user admin from 116.110.148.120 port 46934
Oct 12 20:43:27 C1D543E sshd[2505055]: Failed password for invalid user admin from 116.110.148.120 port 46934 ssh2
Oct 12 20:43:39 C1D543E sshd[2505058]: User root from 116.110.148.120 not allowed because not listed in AllowUsers
...
show less
2026-10-12T20:43:21.087269vm-pico sshd[194856]: pam_unix(sshd:auth): authentication failure; logname ...
show more2026-10-12T20:43:21.087269vm-pico sshd[194856]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.110.148.120
2026-10-12T20:43:22.877515vm-pico sshd[194856]: Failed password for invalid user installer from 116.110.148.120 port 57384 ssh2
2026-10-12T20:43:36.610053vm-pico sshd[194858]: Invalid user admin from 116.110.148.120 port 36590
...
show less
2026-10-12T20:43:22.238009+02:00 yucca sshd-session[63425]: Invalid user support from 116.110.148.12 ...
show more2026-10-12T20:43:22.238009+02:00 yucca sshd-session[63425]: Invalid user support from 116.110.148.120 port 38958
...
show less
Oct 13 02:33:08 bacztwo sshd-session[1758274]: Invalid user installer from 116.110.148.120 port 6061 ...
show moreOct 13 02:33:08 bacztwo sshd-session[1758274]: Invalid user installer from 116.110.148.120 port 60610
Oct 13 02:33:11 bacztwo sshd-session[1758274]: error: PAM: User not known to the underlying authentication module for illegal user installer from 116.110.148.120
Oct 13 02:33:11 bacztwo sshd-session[1758274]: Failed keyboard-interactive/pam for invalid user installer from 116.110.148.120 port 60610 ssh2
Oct 13 02:33:12 bacztwo sshd-session[1758274]: Connection closed by invalid user installer 116.110.148.120 port 60610 [preauth]
Oct 13 02:33:17 bacztwo sshd-session[1758355]: error: PAM: Authentication failure for root from 116.110.148.120
Oct 13 02:33:31 bacztwo sshd-session[1759084]: Invalid user admin from 116.110.148.120 port 46252
Oct 13 02:33:34 bacztwo sshd-session[1759084]: error: PAM: User not known to the underlying authentication module for illegal user admin from 116.110.148.120
Oct 13 02:33:34 bacztwo sshd-session[1759084]: Failed keyboard-interactive/pam for invalid user a
...
show less
Brute-Force
SSH
Anonymous
SSH brute force: repeated failed logins and invalid usernames. Reported by fail2ban.
2026-10-12T23:49:49.776627ns1.parkmydns.com sshd[2588406]: Invalid user user from 116.110.148.120 po ...
show more2026-10-12T23:49:49.776627ns1.parkmydns.com sshd[2588406]: Invalid user user from 116.110.148.120 port 35024
2026-10-12T23:49:53.226648ns1.parkmydns.com sshd[2588408]: Invalid user ubnt from 116.110.148.120 port 35028
2026-10-12T23:50:24.180441ns1.parkmydns.com sshd[2588417]: Invalid user admin from 116.110.148.120 port 50688
2026-10-12T23:50:28.294859ns1.parkmydns.com sshd[2588420]: Invalid user user from 116.110.148.120 port 50964
2026-10-12T23:50:36.433517ns1.parkmydns.com sshd[2588426]: Invalid user installer from 116.110.148.120 port 50968
...
show less
2026-10-12T18:19:53.553992+00:00 ktj-nc sshd[931084]: Connection closed by authenticating user root ...
show more2026-10-12T18:19:53.553992+00:00 ktj-nc sshd[931084]: Connection closed by authenticating user root 116.110.148.120 port 40958 [preauth]
2026-10-12T18:20:02.183946+00:00 ktj-nc sshd[931086]: Invalid user installer from 116.110.148.120 port 41004
...
show less
Oct 12 18:02:54 msk-1-vm-2sd9 sshd[601497]: Failed password for root from 116.110.148.120 port 55288 ...
show moreOct 12 18:02:54 msk-1-vm-2sd9 sshd[601497]: Failed password for root from 116.110.148.120 port 55288 ssh2
Oct 12 18:03:10 msk-1-vm-2sd9 sshd[601504]: Invalid user squid from 116.110.148.120 port 50292
Oct 12 18:03:12 msk-1-vm-2sd9 sshd[601506]: Invalid user config from 116.110.148.120 port 50324
Oct 12 18:03:10 msk-1-vm-2sd9 sshd[601504]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.110.148.120
Oct 12 18:03:12 msk-1-vm-2sd9 sshd[601504]: Failed password for invalid user squid from 116.110.148.120 port 50292 ssh2
...
show less
2026-10-12T21:03:07.587606funtv73224.serv.host sshd[212459]: Invalid user config from 116.110.148.12 ...
show more2026-10-12T21:03:07.587606funtv73224.serv.host sshd[212459]: Invalid user config from 116.110.148.120 port 57248
2026-10-12T21:03:07.862805funtv73224.serv.host sshd[212459]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.110.148.120
2026-10-12T21:03:09.587892funtv73224.serv.host sshd[212459]: Failed password for invalid user config from 116.110.148.120 port 57248 ssh2
...
show less
